Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/3130332e3134362e33302e302f32332d3234203d3e203634333135.roa
File:                     3130332e3134362e33302e302f32332d3234203d3e203634333135.roa (raw, json)
Hash identifier:          CPPNQcfv07oecd/eFqWKae4Va2gHrgYyjgUlFRBQuys=
Subject key identifier:   54:BD:BC:17:D1:91:CF:50:FD:8F:DC:68:32:FB:33:54:3F:58:EF:30
Certificate issuer:       /CN=797DB47B070C0004CCA74AF372328478EE1DF318
Certificate serial:       15A2D54CC36CF68289F0D2622B37D29E99249713
Authority key identifier: 79:7D:B4:7B:07:0C:00:04:CC:A7:4A:F3:72:32:84:78:EE:1D:F3:18
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797DB47B070C0004CCA74AF372328478EE1DF318.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/3130332e3134362e33302e302f32332d3234203d3e203634333135.roa
Signing time:             Sun 03 May 2026 02:40:51 +0000
ROA not before:           Sun 03 May 2026 02:35:51 +0000
ROA not after:            Sun 02 May 2027 02:40:51 +0000
asID:                     64315
IP address blocks:        103.146.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/797DB47B070C0004CCA74AF372328478EE1DF318.crl
                          rsync://rpki-rsync.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/797DB47B070C0004CCA74AF372328478EE1DF318.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797DB47B070C0004CCA74AF372328478EE1DF318.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a2:d5:4c:c3:6c:f6:82:89:f0:d2:62:2b:37:d2:9e:99:24:97:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797DB47B070C0004CCA74AF372328478EE1DF318
        Validity
            Not Before: May  3 02:35:51 2026 GMT
            Not After : May  2 02:40:51 2027 GMT
        Subject: CN=54BDBC17D191CF50FD8FDC6832FB33543F58EF30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1f:5f:57:d2:92:62:84:98:bd:8e:d5:aa:ee:
                    5a:d5:0f:59:75:14:bc:0c:f6:35:0c:75:bd:44:56:
                    ad:34:39:3f:3c:cd:b4:2e:5d:43:ca:b3:52:5b:c7:
                    d4:20:54:ba:88:5f:3f:f3:24:ed:0a:ea:50:29:fd:
                    c5:4f:44:04:45:96:e6:34:f6:fc:5f:17:d5:b2:f8:
                    c8:e4:74:09:d5:fa:2c:ca:d7:2e:94:d2:d2:89:76:
                    c7:71:87:99:20:be:08:9c:11:44:f2:8a:d6:36:fc:
                    f3:10:34:0f:39:35:2e:a6:94:eb:67:ef:d6:8a:25:
                    9e:b3:39:41:b5:a1:63:cc:64:50:b6:0f:eb:24:57:
                    c7:e9:15:ef:92:27:06:23:ac:ff:e1:aa:32:8c:b3:
                    df:ed:fe:60:a5:a3:70:e6:97:0f:2f:e8:3d:81:14:
                    70:24:af:c4:b3:a1:de:46:51:01:0d:64:b8:0e:82:
                    9a:22:f6:67:c3:1f:14:b6:b7:83:c8:8c:d1:5b:13:
                    df:cf:fd:39:ef:1e:cd:1c:34:ad:dd:a0:95:a1:c0:
                    2b:d4:bf:81:93:65:40:f3:6f:0c:23:f5:6c:a6:4d:
                    d4:7e:02:a3:15:7e:0a:64:de:ca:c5:28:77:14:d6:
                    5a:18:bc:02:7b:89:cd:73:77:02:8c:02:de:51:b1:
                    16:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BD:BC:17:D1:91:CF:50:FD:8F:DC:68:32:FB:33:54:3F:58:EF:30
            X509v3 Authority Key Identifier:
                keyid:79:7D:B4:7B:07:0C:00:04:CC:A7:4A:F3:72:32:84:78:EE:1D:F3:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/797DB47B070C0004CCA74AF372328478EE1DF318.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797DB47B070C0004CCA74AF372328478EE1DF318.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6aac3562-d549-43ce-851f-fe924727f918/0/3130332e3134362e33302e302f32332d3234203d3e203634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:81:de:bb:f3:31:7a:78:07:94:34:35:d0:b8:49:82:b2:62:
         f5:66:34:c9:2a:8f:0c:60:32:45:7a:af:5d:a6:14:7b:66:76:
         35:8e:14:dc:f5:9c:c9:9f:20:c5:bb:be:b8:b3:f0:12:20:71:
         43:5e:9f:d1:66:d5:cb:9e:dc:bc:c2:7e:54:3c:2b:0c:45:eb:
         77:f9:8d:a7:ea:3d:23:e1:10:c5:9b:d7:b6:da:e6:1e:88:7d:
         05:b7:de:42:c1:48:41:08:82:e8:87:e1:c1:9e:7c:89:c7:eb:
         0c:aa:0d:b2:73:4b:68:f4:10:d6:11:90:37:df:ab:d6:18:04:
         a6:1c:94:8c:93:b2:81:3c:6a:fa:7e:88:f4:da:14:5c:fa:bd:
         e0:7f:97:12:3f:ec:2c:50:8d:84:fb:42:09:76:34:fc:d8:b4:
         71:21:ff:8d:ae:8b:ea:f3:a6:09:ee:44:a6:38:b0:ba:46:dc:
         08:2d:c0:74:a5:04:77:52:b7:03:89:63:1f:cd:1b:e4:3e:aa:
         2d:6b:09:61:0f:ca:48:d5:69:46:79:80:1f:1c:d5:30:80:45:
         15:55:34:96:a6:fc:56:5c:ae:9b:8f:50:59:c7:f9:da:f2:c0:
         0a:61:0c:5c:d2:f2:d9:0f:53:88:21:a7:4a:7a:2a:cc:6f:af:
         3f:57:68:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:42:24 2026 by rpki-client